Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: s3NDw6m8mELyOmiAPcgb0YR+aM2LHX6kYJ232dUJLEo=
Subject key identifier: 82:27:25:12:A9:03:77:CC:4E:B5:F5:4C:5F:34:7B:33:97:0B:D1:E6
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 0196A208FB42CCD3594A9AD7898E50D2ABD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 0474
Signing time: Mon 05 May 2025 20:00:19 +0000
Manifest this update: Mon 05 May 2025 20:00:19 +0000
Manifest next update: Tue 06 May 2025 20:00:19 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: q2xdBaR3lXINN4rGq2G14dKOXSM29/iSH2RJYJ+lBp0=)
2: ypWsWp3lqcgm3orp5hClVetL1gs.roa (hash: gAI+ZENNE355QZzW1lVcF9M6FT+OGK0PoiiTAc8yFHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:08:fb:42:cc:d3:59:4a:9a:d7:89:8e:50:d2:ab:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: May 5 20:00:19 2025 GMT
Not After : May 6 20:00:19 2025 GMT
Subject: CN=82272512a90377cc4eb5f54c5f347b33970bd1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:5e:03:eb:53:3f:46:91:54:98:38:8e:a5:7f:
d4:74:c5:d9:32:05:87:63:13:3d:07:2c:e3:82:84:
3a:11:f7:9d:1e:f4:a8:b3:85:b9:d7:79:74:4a:30:
0a:cb:5b:0c:6e:4d:d6:10:f0:e0:79:5c:79:e5:9b:
83:b1:da:7b:a6:f5:3d:16:8b:17:dc:2d:7b:1f:de:
14:44:a6:a0:02:0c:09:05:0e:2f:5d:eb:38:0b:ed:
81:99:f1:22:ce:2b:1c:5c:55:c9:fb:e4:50:32:0f:
af:75:e7:e4:69:4e:5e:f7:c7:c0:b1:5b:82:e6:09:
f0:72:6b:08:f5:41:7a:b0:61:da:98:ab:3f:f3:d2:
ab:9a:22:1f:3c:2c:c9:a7:93:19:39:79:ce:a6:b6:
b2:c2:9d:78:b5:16:7d:49:2f:e8:78:bf:c4:88:ca:
e8:97:3b:ce:72:73:58:69:a3:f9:d4:7d:fb:84:08:
20:c7:17:51:d6:6f:6a:7f:95:ad:39:28:77:91:7a:
44:69:6d:60:9f:7f:81:4b:c0:5c:dc:e1:3a:f0:cf:
5a:2b:14:e6:28:d7:b2:27:a6:b3:ac:9a:81:81:14:
d2:72:e1:10:4e:1c:66:7d:55:3d:9d:78:36:e3:2f:
45:78:38:c9:37:02:52:92:3a:08:59:59:6a:34:93:
ce:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:27:25:12:A9:03:77:CC:4E:B5:F5:4C:5F:34:7B:33:97:0B:D1:E6
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d3:39:84:b7:c7:9a:52:7e:d0:35:68:b2:e9:db:73:a8:56:
80:1d:3e:92:db:4d:ea:9d:b5:02:ac:0a:2e:11:4e:92:13:95:
f0:47:ca:a9:af:4b:81:9a:f0:2d:f5:7b:c6:38:8d:88:84:3c:
45:f5:71:da:4f:e9:8e:c9:99:a5:6c:fb:e1:58:f3:12:41:01:
9d:39:2a:ae:8f:bf:6a:24:7e:f6:3a:df:6f:61:fc:a6:75:94:
a0:19:a5:c3:e7:a1:60:be:5f:95:71:c3:8f:31:76:c6:e5:9a:
e6:1c:85:2c:da:95:72:23:db:88:18:9a:c9:fe:e9:01:c8:84:
ba:fd:5f:24:6c:b4:12:5e:be:1b:b2:57:0b:cc:39:0d:b6:26:
9b:94:3a:5d:13:ce:b3:d7:97:11:d9:38:87:d0:00:3f:5b:ee:
8d:88:98:09:ab:54:a8:df:9e:02:12:1c:e9:01:af:ed:7e:2d:
fa:2a:39:08:a8:38:17:83:06:1e:a4:03:13:c1:fc:85:1f:89:
99:9d:73:56:c7:84:30:58:cf:01:79:da:99:a5:6d:a4:d4:0b:
71:c1:be:fd:31:54:14:16:bc:87:72:d2:1e:c6:85:2f:9d:fd:
98:bb:f6:96:f4:cf:78:be:0b:d9:9a:cb:41:4b:ff:4c:89:44:
7f:ec:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:33:28 2025 by rpki-client